|
|
| System | : | Linux MiraNet 3.0.0-14-generic-pae #23-Ubuntu SMP Mon Nov 21 22:07:10 UTC 2011 i686 |
|---|
| Software | : | Apache. PHP/5.3.6-13ubuntu3.10 |
|---|
| ID | : | uid=65534(nobody) gid=65534(nogroup) groups=65534(nogroup)
|
|---|
|
| Safe Mode | : | OFF |
|---|
| Open_Basedir | : | OFF |
|---|
| Freespace | : | 27.76 GB of 70.42 GB (39.43%) |
|---|
|
|
MySQL: ON MSSQL: OFF Oracle: OFF PostgreSQL: OFF Curl: OFF Sockets: ON Fetch: OFF Wget: ON Perl: ON |
|
Disabled Functions: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,
|
[ System Info ]
[ Processes ]
[ SQL Manager ]
[ Eval ]
[ Encoder ]
[ Mailer ]
[ Back Connection ]
[ Backdoor Server ]
[ Kernel Exploit Search ]
[ MD5 Decrypter ]
[ Reverse IP ]
[ Kill Shell ]
[ FTP Brute-Force ]
|
|
/
http/
cgi-bin/
mail/
- drwxrwxrwx
|
Viewing file:  blank.cgi (6.66 KB) -rwxr-xr-xSelect action/file-type:  ( +) |  ( +) |  ( +) | Code ( +) | Session ( +) |  ( +) | SDB ( +) |  ( +) |  ( +) |  ( +) |  ( +) |  ( +) |
#!/usr/bin/perl
use CGI qw(:standard);
print "Content-type: text/html; charset=utf8\n\n";
#$str = "?";
$i = "1";
$total = "0";
print "<html><body><h1><font face=\"arial\">Оформление заказа</font></h1>";
$act = param("act");
$lname = param("lname");
$fname = param("fname");
$tname = param("tname");
$phone = param("phone");
$address = param("address");
$idop = param("dop");
if ($act eq "")
{
print "<font face=\"arial\"><table border=1 cellspacing=0 cellpadding=9>
<tr><td>№</td><td>Наименование</td><td>Количество</td><td>Дополнительно</td><td>Цена</td><td>Сумма</td></tr>";
print "<form name=\"form\" action=\"blank.cgi\" method=\"POST\">";
print "<input type=\"hidden\" name=\"act\" value=\"send\">";
while ()
{
$name = param("item_name_$i");
$num = param("item_number_$i");
$quant = param("quantity_$i");
$price = param("amount_$i");
$dop = param("os0_$i");
$sum = $quant * $price;
if ($name eq "") {last;}
print "<tr><td align=center>$num</td><td>$name</td><td align=right>$quant</td><td>$dop</td><td align=right>$price</td><td align=right>$sum</td></tr>\n";
print "<input type=\"hidden\" name=\"item_number_$num\" value=\"$num\">";
print "<input type=\"hidden\" name=\"item_name_$num\" value=\"$name\">";
print "<input type=\"hidden\" name=\"quantity_$num\" value=\"$quant\">";
print "<input type=\"hidden\" name=\"os0_$num\" value=\"$dop\">";
print "<input type=\"hidden\" name=\"amount_$num\" value=\"$price\">";
$total = $total + $sum;
$i++;
}
print "</table><br>ИТОГО: <b>$total</b> РУБЛЕЙ<br>";
print "<br><font face=\"arial\">
<table border=0 cellpadding=6 align=left>
<tr><td>Фамилия *</td><td><input type=\"text\" name=\"lname\"></td></tr>
<tr><td>Имя *</td><td><input type=\"text\" name=\"fname\"></td></tr>
<tr><td>Отчество</td><td><input type=\"text\" name=\"tname\"></td></tr>
<tr><td>Контактный телефон *</td><td><input type=\"text\" name=\"phone\"></td></tr>
<tr><td>Адрес доставки *</td><td><input type=\"text\" name=\"address\" size=70></td></tr>
<tr><td>Дополнительно</td><td><input type=\"text\" name=\"dop\" size=70></td></tr>
<tr><td></td><td><input type=\"submit\" value=\"Отправить\"></td></tr></table>
</body></html>";
}
if ($act eq "send")
{
if ($lname ne "" and $fname ne "" and $phone ne "" and $address ne "") {$ok = "ok";}
print "<font face=\"arial\"><table border=1 cellspacing=0 cellpadding=9>
<tr><td>№</td><td>Наименование</td><td>Количество</td><td>Дополнительно</td><td>Цена</td><td>Сумма</td></tr>";
$str = "Content-type: text/html; charset=utf8\n\n<html><body><h1><font face=\"arial\">Заказ</font></h1><font face=\"arial\"><table border=1 cellspacing=0 cellpadding=9>
<tr><td>№</td><td>Наименование</td><td>Количество</td><td>Дополнительно</td><td>Цена</td><td>Сумма</td></tr>";
print "<form name=\"form\" action=\"blank.cgi\" method=\"POST\">";
print "<input type=\"hidden\" name=\"act\" value=\"send\">";
while ()
{
$name = param("item_name_$i");
$num = param("item_number_$i");
$quant = param("quantity_$i");
$price = param("amount_$i");
$dop = param("os0_$i");
$sum = $quant * $price;
if ($name eq "") {last;}
print "<tr><td align=center>$num</td><td>$name</td><td align=right>$quant</td><td>$dop</td><td align=right>$price</td><td align=right>$sum</td></tr>\n";
$str = sprintf ("%s <tr><td align=center>$num</td><td>$name</td><td align=right>$quant</td><td>$dop</td><td align=right>$price</td><td align=right>$sum</td></tr>\n", $str);
print "<input type=\"hidden\" name=\"item_number_$num\" value=\"$num\">";
print "<input type=\"hidden\" name=\"item_name_$num\" value=\"$name\">";
print "<input type=\"hidden\" name=\"quantity_$num\" value=\"$quant\">";
print "<input type=\"hidden\" name=\"os0_$num\" value=\"$dop\">";
print "<input type=\"hidden\" name=\"amount_$num\" value=\"$price\">";
$total = $total + $sum;
$i++;
}
print "</table><br>ИТОГО: <b>$total</b> РУБЛЕЙ<br>";
$str = sprintf ("%s </table><br>ИТОГО: <b>$total</b> РУБЛЕЙ<br>", $str);
if ($ok ne "ok")
{
print "<br><left><font face=\"arial\" color=#ff0000><b>Заполнены не все поля, помеченные \" * \"</b></font><br><br><font face=\"arial\">
<table border=0 cellpadding=6>
<tr><td>Фамилия *</td><td><input type=\"text\" name=\"lname\" value=\"$lname\"></td></tr>
<tr><td>Имя *</td><td><input type=\"text\" name=\"fname\" value=\"$fname\"></td></tr>
<tr><td>Отчество</td><td><input type=\"text\" name=\"tname\" value=\"$tname\"></td></tr>
<tr><td>Контактный телефон *</td><td><input type=\"text\" name=\"phone\" value=\"$phone\"></td></tr>
<tr><td>Адрес доставки *</td><td><input type=\"text\" name=\"address\" size=70 value=\"$address\"></td></tr>
<tr><td>Дополнительно</td><td><input type=\"text\" name=\"dop\" size=70 value=\"$idop\"></td></tr>
<tr><td></td><td><input type=\"submit\" value=\"Отправить\"></td></tr></table>
</body></html>";
}
else
{
print "<br><font face=\"arial\"><b>Заказ принят</b><br><br>
<table border=0 cellpadding=6>
<tr><td>Фамилия</td><td><b>$lname</b></td></tr>
<tr><td>Имя</td><td><b>$fname</b></td></tr>
<tr><td>Отчество</td><td><b>$tname</b></td></tr>
<tr><td>Контактный телефон</td><td><b>$phone</b></td></tr>
<tr><td>Адрес доставки</td><td><b>$address</b></td></tr>
<tr><td>Дополнительно</td><td><b>$idop</b></tr></table>
</body></html>";
$str = sprintf ("%s <br><font face=\"arial\"><b>Заказ принят</b><br><br>
<table border=0 cellpadding=6>
<tr><td>Фамилия</td><td><b>$lname</b></td></tr>
<tr><td>Имя</td><td><b>$fname</b></td></tr>
<tr><td>Отчество</td><td><b>$tname</b></td></tr>
<tr><td>Контактный телефон</td><td><b>$phone</b></td></tr>
<tr><td>Адрес доставки</td><td><b>$address</b></td></tr>
<tr><td>Дополнительно</td><td><b>$idop</b></tr></table>
</body></html>", $str);
open(MAIL, "|/usr/lib/sendmail -t");
print MAIL "Content-type: text/html; charset=utf8;\n";
print MAIL "To: pressvs\@bk.ru\n";
# print MAIL "To: mar7\@mail.ru\n";
print MAIL "From: root\@spektrmebeli.ru <root>\n";
print MAIL "Subject: Заказ\n";
print MAIL "$str\n";
close (MAIL);
}
}
|
